coollabsio

Records79All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical23CVSS 9.0–10.0

CVSS high27CVSS 7.0–8.9

Exploited now

coollabsio records in CISA KEV

No coollabsio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Coolify 28 records HIGH

Records

79 records

TI-2025-40716 CVE-2025-66213

Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in File Storage Directory Mount Path

HIGH 82

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.03281 Published 2025-12-23 Fixed in 4.0.0-beta.451 CWE-78

TI-2025-40715 CVE-2025-66212

Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Dynamic Proxy Configuration Filename

HIGH 82

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.03254 Published 2025-12-23 Fixed in 4.0.0-beta.451 CWE-78

TI-2025-40714 CVE-2025-66211

Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename

HIGH 82

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.02854 Published 2025-12-23 Fixed in 4.0.0-beta.451 CWE-78

TI-2025-40713 CVE-2025-66210

Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Import

HIGH 82

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.02854 Published 2025-12-23 Fixed in 4.0.0-beta.451 CWE-78

TI-2025-40712 CVE-2025-66209

Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup

HIGH 82

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.03875 Published 2025-12-23 Fixed in 4.0.0-beta.451 CWE-78

TI-2025-16498 CVE-2025-22612

Coolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE)

HIGH 82

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00616 Published 2025-01-24 Fixed in 4.0.0-beta.374 CWE-200

TI-2025-16495 CVE-2025-22609

Coolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE)

HIGH 82

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00746 Published 2025-01-24 Fixed in 4.0.0-beta.361 CWE-862

TI-2026-41402 CVE-2026-57498

Authorization bypass in coollabsio coolify

HIGH 76

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00315 Published 2026-06-29 Fixed in 4.0.0-beta.474 CWE-639

TI-2026-26373 CVE-2026-34048

Improper authorization in coollabsio coolify

HIGH 76

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00798 Published 2026-07-07 Fixed in 4.0.0-beta.471 CWE-285

TI-2026-26372 CVE-2026-34047

Coolify: WebSocket Endpoint Access Control Flaw Leading to Remote Code Execution

HIGH 76

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00552 Published 2026-07-07 Fixed in 4.0.0-beta.471 CWE-863

TI-2026-26364 CVE-2026-34038

Coolify authenticated remote command injection leading to RCE and secret exfiltration

HIGH 76

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02539 Published 2026-07-06 Fixed in 4.0.0-beta.469 CWE-78

TI-2026-26363 CVE-2026-34037

Cross-Tenant Resource Cloning via Broken Object-Level Authorization in cloneTo()

HIGH 76

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00369 Published 2026-07-07 Fixed in 4.0.0-beta.464 CWE-639

TI-2025-39838 CVE-2025-64424

Colify has command injection vulnerability in project git source

HIGH 76

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.02064 Published 2026-01-05 No fix listed CWE-77

TI-2025-39833 CVE-2025-64419

Coolify vulnerable to command injection via docker-compose.yaml parameters

HIGH 76

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.00651 Published 2026-01-05 Fixed in 4.0.0-beta.445 CWE-77

TI-2025-36762 CVE-2025-59158

Coolify has Stored XSS in Project Name

HIGH 76

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 4.0CRITICAL 9.4 Network Low privileges User interaction EPSS 0.00499 Published 2026-01-05 Fixed in 4.0.0-beta.420.7 CWE-116

TI-2025-36761 CVE-2025-59157

Coolify has Git Repository RCE

HIGH 76

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.01822 Published 2026-01-05 Fixed in 4.0.0-beta.420.7 CWE-78

TI-2025-36760 CVE-2025-59156

Coolify has Docker Compose Injection issue

HIGH 76

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00998 Published 2026-01-05 Fixed in 4.0.0-beta.420.7 CWE-78

TI-2026-42603 CVE-2026-59734

Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution

HIGH 73

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00811 Published 2026-07-09 Fixed in 4.0.0-beta.469 CWE-78

TI-2026-30525 CVE-2026-42204

Coolify: Authenticated RCE via SHELL_SAFE_COMMAND_PATTERN regression → host root

HIGH 73

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00456 Published 2026-07-06 Fixed in 4.0.0-beta.474 CWE-78

TI-2026-30521 CVE-2026-42200

Coolify: PostgreSQL Init Script Path Traversal Leads to Arbitrary File Write and Root RCE

HIGH 73

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00661 Published 2026-07-07 Fixed in 4.0.0-beta.474 CWE-22

TI-2026-30482 CVE-2026-42153

Coolify: PostgreSQL Healthcheck Command Injection Allows Root Code Execution in Container

HIGH 73

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00456 Published 2026-07-06 Fixed in 4.0.0-beta.474 CWE-78

TI-2026-30474 CVE-2026-42143

Coolify: OS Command Injection via Persistent Volume Names - Root RCE on Managed Servers

HIGH 73

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00535 Published 2026-07-07 Fixed in 4.0.0-beta.471 CWE-78

TI-2026-26846 CVE-2026-34599

Coolify: Authenticated Remote Code Execution in GetLogs Livewire Component

HIGH 73

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02801 Published 2026-07-06 Fixed in 4.0.0-beta.471 CWE-78

TI-2026-26844 CVE-2026-34597

Coolify: Authenticated Host RCE

HIGH 73

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00663 Published 2026-06-29 Fixed in 4.0.0-beta.470 CWE-78

TI-2026-26841 CVE-2026-34594

Coolify: Authenticated Remote Code Execution via Command Injection in Destination Network Management

HIGH 73

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01376 Published 2026-06-29 Fixed in 4.0.0-beta.471 CWE-78

Open these records in search →